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Abstract 


The  National  Security  Agency,  established  in  1952  by  President  Truman,  has  continued 
its  cryptologic  heritage  in  both  the  Signals  Intelligence  and  Information  Assurance  missions. 
These  missions  entail  collecting  foreign  intelligence  for  U.S.  Government  decision  makers,  from 
the  President  to  senior  civilian  and  military  leaders.  NSA’s  SIGINT  information  is  used  to 
protect  the  U.S.  military  and  allies,  to  fight  terrorism,  and  to  support  diplomacy.  Its  Information 
Assurance  mission  protects  national  security  information  and  ensures  that  government  leaders 
receive  this  information  securely  and  reliably. 

After  the  September  11,  2001  attacks,  NSA,  as  well  as  the  U.S.  Intelligence  Community, 
Military  and  other  Government  Agencies,  were  called  upon  to  prevent  future  terrorist  attacks. 
The  ensuing  Global  War  on  Terror  required  increased  intelligence  gathering.  Throughout  its 
history,  NSA  has  periodically  weathered  public  criticism.  Recent  releases  of  volumes  of 
classified  information  has  caused  ongoing  criticism  and  examination  despite  having  inflicted 
grave  damage  to  U.S.  National  security.  Moreover,  recent  public  debates,  while  a  necessary, 
integral  part  of  our  American  democratic  society,  put  untold  stress  on  NSA  employees,  who 
traditionally,  necessarily  work  in  silence. 

The  intent  of  this  paper  is  to  urge  NSA  leaders  to  use  new  positive  mechanisms,  in 
addition  to  established  legal  and  punitive  means,  to  strengthen  employee  accountability  and  trust 
as  releases  of  classified  information  continue  and  once-secret  tools  and  techniques  are  examined 
publicly.  This  paper  proposes  that  NSA  establish  a  Code  of  Ethics  and  Professional  Conduct  to 
strengthen  team  cohesion  and  help  employees  resolve  dilemmas  about  mission.  It  argues  that 
articulating  a  Code  of  expected  and  aspirational  behaviors  will  improve  workforce  resilience  and 
thus  protect  against  possible  future  releases  of  classified  information. 


The  paper  deseribes  shared  values  in  the  U.S.  military  Serviees  and  the  Intelligenee 
Community  and  proposes  that  NSA  more  explieitly  define  its  values.  It  proposes  updated  NSA 
values  and  ties  them  to  professional  ethies  while  deseribing  the  benefits  of  artieulating 
organizational  values.  By  defining  Intelligenee  as  a  profession,  eompared  and  eontrasted  with 
those  of  medieine  and  law,  the  author  submits  that  defining  the  Intelligenee  profession  will 
bolster  employees’  view  of  their  work.  Two  reeommendations  are  intended  to  provide  first  steps 
toward  implementing  this  new  employee  foeus.  The  first  reeommendation,  a  proposed  NSA 
Code  of  Ethies  and  Professional  Conduet,  will  enable  employees  to  express  their  eommitment  to 
shared  values.  The  seeond  reeommendation  outlines  a  eommunieation  plan  to  enable  all  levels 
of  NSA  leadership  to  ineulcate  this  Code  throughout  the  workforce.  NSA,  by  explicitly  defining 
shared  values  and  behavior  expectations,  will  improve  employee  morale  and  cohesion.  This  will 
also  reinforce  commitments  to  lifelong  obligations,  and  increase  overseers  and  public  confidence 
in  the  Agency’s  missions  and  compliance  with  law. 


Introduction 


Intelligence  Community  insiders  may  release  classified  information  for  a  variety  of 
reasons,  most  of  which  are  thwarted  by  monitoring,  security  investigations,  and  self-reporting. 
Recently,  individuals  responsible  for  extremely  damaging  releases  of  classified  information  have 
said  that  they  were  motivated  by  the  belief  that  mission  activities  were  wrong  and/or  that 
whistleblowing  was  morally  required.  Thwarting  insider  threats  motivated  by  these  feelings  will 
require  enabling  insiders  to  address  their  conscience  problems. 

Responses  to  recent  leaks  and  possible  insider  threats  have  spanned  the  United  States 
Intelligence  Community  (IC),  Federal  Bureau  of  Investigation  (FBI),  and,  most  recently,  the 
United  States  Congress.  The  Defense  Authorization  Act  for  FY2015  reportedly  contains 
requirements  for  quarterly  reports,  for  the  next  two  years,  about  the  Department  of  Defense’s 
response  to  classified  information  leaks.  The  Act  cites  the  fact  that  “hundreds  of  thousands  of 
classified  documents  [that]  were  illegally  copied  and  disclosed  across  the  internet,”  likely 
referring  to  the  2010  WikiLeaks  disclosures  by  former  U.S.  soldier  Manning  *.  It  also  refers  to 
the  classified  information  releases  by  Edward  Snowden  with  the  wording,  “in  2013,  nearly 
1,700,000  [classified]  files  were  downloaded...  the  majority  of  the  information  compromised 
relates  to  the  capabilities,  operations,  tactics,  techniques,  and  procedures  of  the  Armed  Forces  of 
the  United  States.”  ^ 

Another  highlight  from  the  Defense  Authorization  Act  of  2015  is  that  it  requests  “the 
adoption  of  an  interim  capability  to  continuously  evaluate  the  security  status  of  employees  and 
contractors  of  the  Department  who  have  been  granted. .  .access  to  classified  information.”  Is 
this  interim  capability  designed  to  detect  problems  of  conscience?  While  consent  to  monitoring 
of  U.S  Government  information  systems  is  currently  practiced  in  accordance  with  the  1981 


Executive  Order  12333"^,  one  wonders  what  type  of  additional  monitoring  will  be  entailed  in 
‘continuous  evaluation  of  all  security-cleared  persons’  security  status? 

Security  policies  are  designed  to  protect  classified  information  and  stop  unauthorized 
disclosure  of  such  information  that  can  cause  grave  damage  to  the  national  security  of  the  United 
States.  However,  Executive  Order  12968,  dated  August  2,  1995,  established  uniform  security 
policies  to  ensure  fair  and  equal  treatment  for  all  Eederal  employees  who  access  classified 
information.  ^ 

While  the  concept  of  fairness  is  subjective,  security-cleared  employees  are  required  to 
provide  sensitive  personal  information  in  order  to  obtain  and  retain  their  jobs.  Conditions  of 
employment,  and  access  to  National  Security  Agency  (NSA)  automated  information  systems, 
requires  that  all  employees  and  contractor  personnel  file  an  annual  Security  Einancial  Disclosure 
Eorm  (SEDE),  SE714,  in  accordance  with  Executive  Order  12968  ^  and  stipulated  in  50  U.S.C. 
435.  ^  The  detailed  personal  information  required  for  SEDE  includes  bank  and  investment 
accounts,  owned  or  leased  real  estate/vehicles/boats/airplanes,  as  well  as  credit  card  and 
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mortgages  payment  and  balances.  This  additional  security  monitoring,  an  institutional  reaction 
implemented  in  SEDE,  was  initiated  in  1995,  just  after  Aldrich  Ames’  1994  espionage 
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conviction. 

NSA’s  institutional  reaction  to  these  recent  releases  of  volumes  of  classified  information 
will  likely  also  be  legalistic.  Additional  security  monitoring  actions,  intending  to  prevent  future 
releases,  may  not  consider  impacts  on  employees.  This  paper  address  the  problem  that  employee 
morale,  recruitment  and  retention  may  be  damaged  by  public  perception  of  NSA  activities,  as 
well  as  from  additional  security  monitoring  of  employees.  Increasing  monitoring  of  employees 


effectively  punishes  current  employees  for  the  grave  damage  done  by  past  employees  who 
unlawfully  released  classified  information. 

Current  practices  to  mitigate  insider  threats  include  Agency  leaders’  talking  about  core 
values**^,  an  entry-on-duty  oath,  and  annual  mandatory  training  that  emphasizes  lifelong 
obligations.  On  their  first  day  of  employment,  and  not  again  at  any  later  date,  new  employees 
take  an  oath  and  sign  a  lifelong  obligation  agreement  to  protect  classified  information. 

Mandatory  annual  training  reinforces  explanations  of  missions,  information  security  processes 
and  penalties  as  well  as  employees’  obligations,  laws,  and  Executive  Order  authorizations. 

The  lifelong  obligation  to  protect  classified  information  entails  a  legalistic  approach  that 
primarily  uses  negative  reinforcement  means  of  threatened  legal  prosecution  and  punishment. 

For  example,  the  NSA  Office  of  General  Counsel/ Administrative  Law  and  Ethics  office  explains 
ethics  as  the  behavior  underpinning  compliance  with  law  through  Regulation  5CFR2635  2365.01 
Federal  Employees  Standard  of  Conduct.  While  appropriate  and  necessary,  this  paper  suggests 
that  a  legalistic  approach  is  not  sufficient  in  all  cases.  It  does  not  create  an  esprit  de  corps  to  help 
employees  work  through  ethical  dilemmas  regarding  missions  or  capabilities.  It  does  not  foster 
resilience  amongst  employees  given  that  protection  of  classified  information  imposes  an  often 
non-social  organizational  culture. 

NSA  culture,  in  keeping  with  E.O.  12698,  practices  “need  to  know”  for  access  to 
classified  information.  Practices  and  processes  are  necessarily  designed  to  isolate  information 
and  people,  and  intelligence  professionals  vet  co-workers  in  most  workplace  interactions.  All  of 
these  factors  make  an  insider  threat  particularly  damaging  to  the  multi-faceted  trust  involved  in 
intelligence  work.  Institutional  responses  to  the  grave  damage  from  the  2010  and  2013 
compromises  of  classified  information  may  involve  expanded  employee  monitoring.  To  improve 


trust,  the  author  proposes  new  measures  that  foeus  on  positive,  instead  of  negative,  reinforeement 
of  expected  behaviors  of  employees  as  intelligence  professionals. 

This  paper  proposes  a  new  effort  to  create  an  ethos,  through  shared  values,  that  builds 
workforce  cohesion,  enhances  belief  in  mission,  and  strengthens  employees’  resilience.  Because 
self-identity  is  related  to  behavior,  employees’  identifying  themselves  as  intelligence 
professionals  is  likely  to  enhance  compliance  with  professional  norms  as  well  as  lifelong 
obligations.  In  contrast,  absence  of  identity  as  professionals  may  consign  individuals  to  greater 
risk  of  pursuing  courses  of  action  consistent  with  an  alternative  “good,”  which  may  instead  bring 
long-lasting  damage  to  the  security  of  the  United  States.  A  newly-expressed  NS  A  ethos  will 
enable  employees  to  reconcile  dilemmas  about  their  patriotic  work  in  good  faith. 


Thesis 


This  paper  proposes  a  new  Code  of  Ethics  and  Professional  Conduct  that  describes  shared 
values  and  expected  behaviors  for  NSA  Intelligence  professionals.  This  Code  will  help 
employees  work  through  and  resolve  ethical  dilemmas  when  they  feel  that  their  job  duties 
conflict  with  their  conscience.  It  will  enhance  legal  support  provided  by  the  Offices  of  General 
Counsel,  Inspector  General,  and  Compliance  Office,  by  inculcating  a  new  culture  of  mutual 
support.  The  Code  will  engender  a  professional  esprit  de  corps  and  help  further  communicate 
NSA’s  commitment  to  earning  public  trust,  accountability,  and  lawfulness. 

This  paper  will  not  address  reasons  for  release  of  classified  information  for  financial  gain, 
foreign  allegiance,  or  mental  instability.  Assistance  is  available  through  Employee  Assistance 
Service  as  well  as  supervisors  and  leadership.  Recent  most-damaging  releases  of  classified 
information  by  Edward  Snowden  has  brought  forth  negative  public  debate  about  the  National 
Security  Agency’s  activities,  capabilities  and  operations.  Public  unease  may  affect  employees’ 
personal  perceptions  and  bring  about  ethical  dilemmas  about  NSA’s  mission  or  capabilities.  This 
paper  proposes  that  a  new  NSA  Code  of  Ethics  and  Professional  Conduct  will  create  an  ethos  to 
buoy  morale,  improve  retention  and  help  prevent  future  releases  of  classified  information. 


Shared  Values 


Shared  values  help  individuals  form  into  a  eohesive  group.  Values  are  defined  in  the 
Oxford  Ameriean  Dietionary  as  “a  person’s  principles  or  standards  of  behavior,”  In  the  United 
States  military,  they  tell  individuals  how  to  live  every  day  and  how  to  behave  as  members  of 
their  Service.  They  provide  strength  and  enable  perseverance  through  personal  and  group 
adversity,  small  and  large  challenges,  and  warfighting.  Shared  values  express  the  personality  of 
the  group  and  remind  its  members  of  their  ideals. 

U,S,  Military  Services’  Values 

The  U.S.  military  services  describe  values  in  ways  that  reflect  their  organizational 
cultures.  Air  Force  core  values  of  “integrity  first,  service  before  self  and  excellence  in  all  we  do” 
include  detailed  explanations  for  accountability.  The  Army’s  7  practical,  relevant  values  are 
each  described  with  a  few  sentences  that  explain  what  a  solider  does  to  embody  them.  The 
Navy  refers  to  its  historical  roots  and  lists  expected  behaviors  for  each  value,  i.e.,  “for 
honor. .  .we  will  conduct  ourselves  in  the  highest  ethical  manner. . .”  The  Marine  Corps  defines 
each  value  in  terms  of  how  they  are  seen  in  each  Marine,  i.e.,  “courage  ...  is  the  inner  strength 
that  enables  a  Marine  to  take  that  extra  step.” 

In  addition  to  values.  Services’  creeds,  songs,  emblems  and  insignia  are  visible  accounts 
of  what  it  means  to  be  Airmen,  Soldiers,  Sailors,  Marines  and  Coast  Guardsmen.  The  Army  and 
Coast  Guard  also  publish  an  Ethos  that  begin  with  the  words  “I  am  a  Coast  Guardsman.  I  serve 
the  people  of  the  United  States. . .”  and  the  Army’s  Warrior  Ethos,  “I  will  always  place  the 
mission  first. . . .”  Eittingly,  organizations  and  agencies,  are  “autonomous  social  groups  [that] 
can  be  partly  defined  by. .  .their  constitutive  goals,  values,  beliefs,  norms  and  standards. .  .called 
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the  ethos  of  the  group.”  The  modem  publie  faee  of  an  organization,  its  website,  is  the  visible 
display  of  this  ethos. 

U,S,  Intelligence  Community  Values 

Given  that  NSA  is  both  a  U.S.  Department  of  Defense  (DOD)  and  IC  ageney,  let’s 

eompare  its  published  values  to  DOD’s  Defense  Intelligenee  Ageney  (DIA)  and  the  IC’s  Central 

Intelligenee  Ageney  (CIA)  values  on  their  publie  websites.  DIA’s  values  list  is  sueeinet,  and 

therefore,  I  submit,  identifiable  for  its  employees.  DIA  values  of  teamwork,  integrity,  exeellenee 

and  serviee  are  eaeh  explained  with  a  elause.^^  CIA’s  eore  values  of  serviee,  integrity  and 

exeellenee  are  eaeh  expanded  with  3  expeeted  behaviors,  i.e.,  for  exeellenee,  “we  hold  ourselves 

20 

-  and  eaeh  other  -  to  the  highest  standards.” 

In  eontrast,  NSA’s  eore  values  are  not  explieitly  listed  on  its  publie  website.  The 
Commitment  page  extols  promises  of  “integrity,  transpareney,  aceountability  and  respeet  for  the 
law”  to  the  United  States,  our  fellow  eitizens,  and  the  eommunity.  A  supplemental  broehure, 
entitled  NSA/CSS  Core  Values/Clear  Vision,  foeuses  on  operations,  mission,  eomplianee, 
heritage  and  future  goals.  In  a  video  message  from  the  most  reeent,  former  Deputy  Direetor  John 
C.  Inglis,  he  diseusses  “respeet  for  the  law,  honesty,  integrity  and  transpareney.”  Eight 
questions  in  a  text  version  elarify  NSA’s  respeet  for  the  law  and  transpareney,  but  do  not  expand 
on  the  eore  values  of  personal  honesty  and  integrity.  The  website  also  deseribes  the  relative 
importanee  of  eivil  liberties  and  national  seeurity,  eomplianee,  legal  mles,  and  the  mission.  Thus, 
the  publie  faee  of  NSA  foeuses  outward  on  its  mission  and  serviee  to  proteet  the  nation,  whereas 
this  paper  proposes  artieulating  values  as  a  new  inward  foeus  that  explains  to  employees  how  we 


will  behave  and  reminds  us  of  our  ideals. 


The  Office  of  the  Director  of  National  Intelligence  (ODNI)  website  lists  three  values, 
Stewardship,  Excellence  and  Diversity  in  its  Principles  of  Ethics  for  the  Intelligence  Community. 
It  describes  stewardship  in  terms  of  public  trust,  protecting  sources  and  methods,  reporting 
wrongdoing  and  remaining  accountable  .  .ultimately  to  the  American  people.”  Excellence 
means  improving  performance,  “sharing  information  responsibly,”  collaborating  and  innovating. 
And  Diversity  includes  promoting  “diversity  and  inclusion  in  our  work  force. . .”  as  well  as  in  our 
thinking.  These  general  principles  of  ethics  apply  across  the  U.S.  Intelligence  Community  and 
thus  NSA  should  articulate  compatible  values  specific  to  its  culture. 

Proposed  Updated  NSA  Values 

NSA  values  correlate  to  those  of  ODNI,  and  support  intelligent,  creative  and  forward- 

thinking  employees  to  stay  ahead  of  adversaries  and  ensure  the  safety  and  security  of  our  nation. 

To  help  employees  work  through  possible  dilemmas  from  mission  work  conflicts  with  their 

consciences,  the  author  proposes  explicitly  defining  shared  values  that  represent  ethical  ideals. 

Eor  example,  a  succinct,  yet  relatable,  values  statements  may  be  articulated  as  follows: 

NSA  employees  strive  to  continuously  improve  performance  and  hold  ourselves 
to  the  highest  standards.  We  encourage  adaptive  and  forward-thinking  ideas  to  develop 
new  approaches.  We  protect  United  States  information  and  information  technology.  We 
partner  with  other  federal  agencies.  We  are  dedicated  to  delivering  for  U.S.  decision 
makers  and  service  members  alike.  Thus,  all  dedicated  NSAers  are  committed  to  three 
enduring  values: 

•  Integrity:  truthful  words  match  our  actions  and  we  are  accountable  to  the  nation, 
community,  managers  and  leaders,  and  fellow  employees; 

•  Competence:  we  are  dedicated  and  focused  professionals  who  overcome 
technological  challenges  and  excel  in  all  intelligence-related  skills; 

•  Patriotic  Service:  we  trust  and  are  loyal  to  the  United  States  and  its  Constitution, 
the  Intelligence  Community  and  the  Agency. 


Shared  values,  such  as  those  suggested  above,  will  enhance  employee  cohesion  and 
underpin  a  new  inward  focus  on  employees  by  articulating  NSA  values  in  a  personal  manner. 


Describing  intelligence  as  a  profession  with  associated  professional  ethics  standards  will  further 
uplift  employee  morale  and  resilience. 

Professional  Ethics 

Professional  Ethics  Standards 

In  the  study  of  professional  ethics,  a  central  theme  is  that  “competence  is  perhaps  the 
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most  crucial  characteristic”  and  is  derived  from  a  basic  notion  of  trustworthiness  or  integrity. 

For  example,  in  the  law  and  medical  professions,  competence,  which  is  crucial  in  order  to 
become  a  member,  is  achieved  from  education  as  well  as  the  number  of  cases  tried  or  operations 
performed,  and  is  followed  by  trust.  If  a  lawyer  or  doctor  is  incompetent,  we  will  not  trust  them 
to  perform  a  job  and  they  may  lose  their  professional  license.  Intelligence  is  different  in  that  trust 
is  paramount,  and  while  competence  is  important,  it  is  considered  after  trust  has  been 
established. 
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In  general,  “competence  is  a  character  trait,  a  disposition  to  act  in  certain  ways. . .” 
Furthermore,  “to  have  integrity  is  largely  to  have  those  qualities  that  render  one  trustworthy.” 
Thus,  I  believe  that  both  integrity  and  competence  are  top  values  in  the  intelligence  field. 

In  the  author’s  experience,  NSA  employees,  like  all  professionals,  are  driven  to  excel  in 
their  work.  Given  the  classified  work  environment,  where  need-to-know  is  the  criteria  to  obtain 
access  to  classified  information,  employees  must  believe  that  a  co-worker  will  do  the  work 
competently,  after  first  establishing  that  they  are  trustworthy.  Despite  employees’  holding 
security  clearances,  operational  details  and  sources  and  methods  are  held  to  a  strict  need-to-know 
basis  so  that  trustworthiness  is  continually  earned  through  personal  and  operational  experience. 

Those  who  work  in  classified  environments  hold  trustworthiness  amongst  fellow 
employees  as  paramount.  Edward  Snowden’s  extensive  classified  information  releases  and  the 


associated  loss  of  mission  capabilities,  tools  and  techniques  places  signifieant  stress  on  the 
employee-to-employee  trust  that  is  vital  for  mission  suceess.  Changes  to  laws  and  national 
security  policy  necessarily  adjust  missions,  but  the  insider  threat,  made  real  by  Manning’s  and 
Snowden’s  releases,  are  disheartening  and  demoralizing  to  the  employees  whose  patriotic  service 
proteets  the  nation.  Sueh  releases  may  especially  damage  the  eohesion  of  the  workforce. 

Team  Cohesion  and  Self-esteem 

The  Greek  philosopher  Aristotle’s  examinations  of  ethics  and  ethical  practices,  when 
applied  to  the  study  of  business  ethics,  puts  forth  that  ethics  are  the  nexus  of  the  “individual,  the 
eorporation,  and  the  community,  self-interest  and  the  public  good.”  Two  aspects  of  this 
assertion  accurately  characterize  NSA  employees.  Excellence  is  described  as  a  “word  of  great 
significance  and  indicates  a  sense  of  mission. .  .It  is  a  word  that  suggests  [not  only]  ‘doing  well’ 
but  also  ‘doing  good.’  ”  People  are  motivated  to  work  at  NSA,  often  for  less  pay  than  in  a 
eommereial  industry  job,  to  do  good.  Aristotle’s  writings  also  eapture  the  essenee  of  eommunity, 
applicable  to  the  IC  as  well  as  NSA,  “in  whieh  a  sense  of  collective  purpose  and  soeial  well- 
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being  defines  the  aspirations  and  virtues  of  the  individual.” 

A  modern  philosopher,  John  Rawls  of  Harvard  University,  describes  the  “soeial  bases  of 
self-respect”  in  his  1971  seminal  book,  A  Theory  of  Justiee.  The  soeial  bases  of  self-respect  are 
“those  aspects  of  basic  institutions  normally  essential  if  citizens  are  to  have  a  lively  sense  of  their 
worth  as  persons. . .”  While  Rawls’  work  discussed  social  bases  as  features  of  basic  society,  the 
IC,  and  thus  NSA,  from  soeiety-like  organizational  eultures. 

Benefits  of  Articulating  Organizational  Ethics 

Group  norms  characterize  the  broader  IC,  and  its  member  agency  NSA,  whose  culture  is 
steeped  in  security  protocols,  protecting  classified  information,  following  the  law,  and  being 


honest.  Articulating  values  and  professional  ethics  in  the  NSA  culture  will  bring  added  focus  to 
employees  as  individuals.  A  social  contract  will  help  all  employees  not  only  hold  each  other 
accountable,  but  also  support  each  other  to  do  the  right  thing,  and  thus  may  curb  possible  future 
breaches  of  classified  information.  Commencing  a  new  dialogue  about  values,  professional 
ethics  and  expected  behaviors,  will  help  boost  employees’  outlook  about  NSA’s  mission  and 
their  intelligence  work. 

The  Profession  of  Intelligence 

Definitions  of  Intelligence 

A  literature  search  reveals  numerous  definitions  of  Intelligence,  illustrated  in  a  1990 
dictionary  of  intelligence  terms  in  which  17  pages  contain  127  definitions.  NSA  was 
established  by  order  of  President  Truman  in  1952,  and  a  declassified  1958  definition  is  still 
fitting  today,  “Intelligence  is  the  collecting  and  processing  of  that  information  about  foreign 
countries  and  their  agents  which  is  needed  by  a  government  for  its  foreign  policy  and  for  national 
security...” 

More  recently,  in  1996,  the  Joint  Military  Intelligence  College  provided  a  description  of 
Intelligence  as:  “knowledge  of  the  enemy,  and  the  operational  environment,  both  of  which  are 
processed  and  packaged  for  a  specific  customer’s  requirements  for  making  decisions  in  matters 
of  national  security  and  operational  execution.”  The  JMIC  author  also  proposed  principles  of 
Intelligence,  based  on  his  analysis  of  doctrine:  accuracy,  objectivity,  usability,  relevance, 
readiness  (systems  responsiveness)  and  timeliness.  In  this  paper’s  author’s  experience,  these 
definitions  and  descriptions  of  principles  accurately  capture  the  characteristics  of  the  Intelligence 


field. 


Definitions  of  Professions 


In  order  to  assert  that  Intelligenee  is  indeed  a  profession,  this  paper  foeuses  on  the  body 
of  work  that  eneompasses  Intelligenee  and  its  role  in  soeiety.  “The  professions  are  eharaeterized 
by  three  or  four  eentral  features  -  extensive  training,  a  significant  intellectual  component  to 
practice,  the  provision  of  an  important  service,  and  perhaps  credentialing.”  The  missions  and 
activities  of  NS  A  reflect  extensive  training  and  intellectual  capital  utilized  in  the  diverse  signals 
intelligence  disciplines,  including  communications  intelligence  (COMINT),  electronic 
intelligence  (ELINT)  and  foreign  instrumentation  signals  intelligence  (FISINT).  The  important 
service  aspect  of  those  disciplines  is  reflected  in  ODNTs  reference  to  the  IC’s  role  to  protect  the 
United  States  against  transnational  threats  such  as  terrorism,  proliferation,  chemical  and 
biological  warfare,  and  information  infrastructure. 

Extensive  training  and  specialized  credentialing  is  required  for  most  NSA  positions. 
Newly-hired  employees  with  undergraduate  and  graduate  degrees  learn  the  “SIGINT  business” 
through  on-the-job  training  as  well  as  multi-year  development  programs  and  internships  in 
engineering,  mathematics,  foreign  language,  intelligence  analysis,  etc.  Intelligence  training, 
analogous  to  credentialing,  is  a  process  of  establishing  extensive,  specialized  skills.  SIGINT 
training  and  experience  enables  varied  careers  in  computer  science,  mathematics,  engineering, 
foreign  languages,  intelligence  analysis,  installation  and  logistics,  and  business  and  security. 

In  this  paper  the  author  argues  that  all  work  roles,  including  support  functions  such  as 
security  services,  installation  and  logistics,  and  training,  are  essential  components  of  NSA’s 
intelligence  mission.  The  requirement  to  learn  the  SIGINT  business  indicates  a  significant 
intellectual  component  to  practicing  Intelligence.  Therefore,  these  support  functions  also 


encompass  Intelligence  work,  as  all  mission  areas  require  specialized  training  and  knowledge  to 
practice. 

In  addition,  aspects  of  the  role  of  professions  further  support  that  Intelligence  is  a 
profession  -  provision  of  services  related  to  basic  values,  control  or  monopolization  of  the 
provision  of  services  and  membership  in  them,  and  self-regulation.”  Intelligence  provides 
services  integral  to  the  basic  values  of  America,  by  providing  critical  information  to  the 
President,  the  National  Security  Council,  Secretaries  of  Defense  and  State  and  other  Executive 
Branch  officials,  to  conduct  foreign  relations  and  protect  national  security.  Control  of  services 
and  membership  is  conducted  through  security  clearance  processes.  Self-regulation  is  achieved 
via  need-to-know  practices  and  “out-of-the-box”  thinking,  within  the  bounds  of  law,  to  perform 
Intelligence  work.  “Intelligence  professionals  cannot  afford  to  consider  only  information  that 
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conforms  to  their  own  pre-existing  worldview  or  agreed  upon,  collective  perspective.” 
Characteristics  of  Intelligence  as  a  Profession 

Expanding  on  the  1947  definition,  ODNI  today  describes  Intelligence  as  “activities 
necessary  for  the  conduct  of  foreign  relations  and  the  protection  of  the  national  security  of  the 
United  States.  [Eurther,]  activities  to  protect  against  intelligence  activities  directed  against  the 
US,  international  terrorist  and  international  narcotics  activities,  and  other  hostile  activities 
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directed  against  the  U.S.  by  foreign  powers,  organizations,  persons,  and  their  agents.” 

The  Intelligence  profession  may  be  characterized  by  analogy  to  the  medical  profession, 
as  “in  medicine,  success  is  measured  post  facto.”  Eike  medicine,  where  failures  may  only  be 
evident  when  the  patient  dies,  intelligence  failures  may  only  become  evident  when  attacks  occur 
or  unforeseen  events  damage  foreign  relations  situations.  However,  when  intelligence  is 
successful,  when  the  patient  lives,  it  is  not  known  how  well  the  profession  performed. 


Lastly,  other  characteristics  of  professions  that  apply  to  the  Intelligence  profession 
include  that:  “they  are  voluntary  [we  must  seek  membership];  they  are  organizations;  they  have 
special,  morally  permissible  standards  for  conducting  business,  and  to  be  a  member  is  to  be 
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subject  to  a  special  set  of  standards.” 

Recommendations 

U.S.  Intelligence  professionals  were  called  upon  to  change  focus  from  nation-states  to 
violent  non-state  actors,  after  the  end  of  the  Cold  War,  and  particularly  after  the  Global  War  on 
Terror  began,  after  the  September  1 1th  2001  attacks.  The  2006  Joint  Chiefs  of  Staff  National 
Military  Strategic  Plan  for  the  War  on  Terrorism,  asserts  that  “The  United  States  is  at  war  against 
extremists  who  advocate  and  use  violence  to  gain  control  over  others,  and  in  doing  so,  threaten 
our  way  of  life.”  Preventing  terrorist  attacks  entailed  launching  more  proactive  intelligence 
gathering  and  direct  action  operations,  which  have  recently  brought  governmental  transparency, 
individual  privacy  and  civil  liberties  rights  into  public  debate.  Intelligence  leaders  must  be  aware 
of  the  effect  that  these  debates  have  on  the  public  as  well  as  intelligence  professionals. 
“Professional  ethics...  involves  aspects  of  the  political,  social,  and  legal  philosophy  as  well.” 

A  new  code  of  professional  ethics  will  help  NSA  Intelligence  practitioners  to  better  cope 
with  the  pressures  of  carrying  out  missions  against  terrorist  and  other  transnational  threats  in 
addition  to  long-standing  SIGINT  missions.  A  code  of  professional  ethics  may  be  leveraged  as  a 
mechanism  of  social  contract,  “a  way  of  coordinating  the  conduct  of  people  engaged  in  a 
common  occupation.”"^^  Furthermore,  “adopting  a  realistic  code  is  part  of  making  an  occupation 
[into]  a  distinct  profession.” 

The  dedicated  NSA  workforce  takes  an  unassuming  role  with  an  organizational  culture 
that  focuses  on  mission,  law  and  compliance,  commitments  to  protect  our  fellow  citizens  and 


nation,  as  well  as  NSA’s  role  in  the  Department  of  Defense  and  the  U.S.  Intelligence 
Community.  There  is  a  special  dichotomy  that  comes  from  doing  the  work  of  the  National 
Security  Agency:  “They  served  in  silence”  is  our  way  and  “we  won’t  back  down;  we  never  have; 
we  never  will”  has  been  a  motto  since  the  September  1 1*  2001  attacks.  This  paper  proposes  a 
new  Code  of  Ethics  and  Professional  Conduct  to  buoy  the  employees,  and  help  them  embody 
what  it  means  to  do  this  work.  This  code  will  bring  an  ethical  culture  to  the  forefront,  improve 
morale  and  loyalty  of  all  employees,  and  raise  the  level  of  confidence  and  trust  with  overseers  as 
well  as  the  public. 

Example  Professional  Codes  of  Ethics 

To  draft  a  Professional  Code  of  Ethics,  this  author  reviewed  examples  that  represented 
the  attributes  of  Intelligence.  Project  management  attributes  are  similar  to  good  practices  of 
Intelligence  work  performed  at  NS  A.  Timeliness,  cost  and  resource  savings,  quality,  efficiency, 
and  productive  communication  with  customers  and  stakeholders  are  practices  that  Project 
Management  Institute  (PMI)  brings  about  through  its  accreditation  community.  Thus,  PMEs 
Code  of  Ethics  and  Professional  Conduct,  shown  in  Appendix  A,  is  a  good  example  to 
consider  in  developing  anNSA  Code  of  Ethics  and  Professional  Conduct. 

While  PMEs  Code  of  Ethics  and  Professional  Conduct  is  clear,  logical  and  thorough,  its 
eight-page  length  would  likely  be  cumbersome  for  NSA’s  time-critical,  technologically  and 
operationally-driven  employees.  In  the  author’s  experience,  this  mission-focused  culture  is  most 
receptive  to  succinct,  highly-relevant,  relatable  information  that  will  help  employees  do  their 
jobs. 

NSA  employees,  who  are  often  working  on  time-critical  activities  for  incomplete  and 
changing  problems,  will  be  most  receptive  to  a  one-page  Code.  Below  is  a  proposed  outline: 


Proposed  NSA  Code  of  Ethics  and  Professional  Conduct 

I.  Vision  &  Purpose: 

a.  This  Code  of  Ethics  and  Professional  Conduct  sets  the  expectations  that  we  have 
for  ourselves  as  NSA  Intelligence  Professionals.  It  describes  required  behaviors  as 
well  as  those  to  which  we  aspire. 

b.  It  is  in  keeping  with  ODNI’s  Principles  of  Professional  Ethics  for  the  Intelligence 
Community:  Stewardship,  Excellence  and  Diversity. 

c.  This  Code  will  shore  up  internal  mechanisms  for  airing  concerns.  It  will  help 
NSA  employees  work  through  possible  ethical  dilemmas  regarding  missions  or 
capabilities. 

d.  It  will  provide  ‘big  picture’  transparency.  Articulating  this  code  will  improve  buy- 
in,  group  cohesion  and  camaraderie. 

II.  Persons  to  Whom  Code  Applies 

a.  This  Code  applies  to  all  civilian  employees,  interns  and  military  personnel  of 
NSA. 

III.  Values  that  support  Code 

This  Code  is  our  commitment  that  our  everyday  behavior  at  work  will  reflect  shared 
values  of  Integrity,  Competence  and  Patriotic  Service. 

a.  Integrity  means  that  we  uphold  the  highest  standards.  We  always  speak  the  truth. 
We  commit  to  continually  improving  our  skills  and  sharing  our  knowledge  to 
increase  our  contributions  to  mission. 

b.  Competence  means  that  we  develop  the  related  abilities,  commitments, 
knowledge  and  skills  to  act  effectively  in  any  job  or  situation. 

c.  Patriotic  Service  means  that  we  are  dedicated  to  the  mission  and  are  very 
responsive  to  customers’  needs.  We  always  act  in  accordance  with  U.S.  laws. 

IV.  Aspirational  and  mandatory  behaviors 

a.  Integrity:  Aspirational  behaviors 

i.  We  will  do  what  is  best  for  the  mission  while  taking  care  of  our  health  and 
well-being. 

ii.  We  will  follow-through  with  commitments  and  always  do  what  we  say. 

b.  Integrity:  Mandatory  behaviors 

i.  We  will  speak  and  seek  the  truth  in  all  workplace  situations. 

ii.  We  will  solve  problems  and  challenges  in  the  correct  way. 

c.  Competence:  Aspirational  behaviors 

i.  We  will  continually  learn  and  broaden  our  skills. 

ii.  We  will  seek  and  perform  higher  level  roles  with  broader  mission  impact. 

d.  Competence:  Mandatory  behaviors 

i.  We  will  perform  each  job  to  the  best  of  our  ability. 

ii.  We  will  seek  information  and  actively  learn  skills  needed  to  perform  well. 


e.  Patriotic  Service:  Aspirational  behaviors 

i.  We  will  make  decisions  that  are  best  for  the  U.S.  and  its  taxpayers. 

ii.  We  will  embraee  transparency  to  the  fullest  extent  possible, 
f  Patriotie  Serviee  Mandatory  behaviors 

i.  We  will  always  aet  in  a  lawful  manner. 

ii.  We  will  always  act  in  ways  that  earn  the  public  trust. 

Proposed  Implementation  Means 

An  NS  A  Code  of  Ethies  and  Professional  Conduet  provides  a  means  for  employees  to 
verbalize  values  and  standards  that  are  present,  but  not  necessarily  explicitly  communicated  on  a 
regular  basis.  Senior  leadership  must  ‘own’  this  Code  and  affirm  it  in  order  to  develop  a  visibly 
ethical  Agency  environment,  foster  a  more  resilient  workforce,  and  inspire  public  trust. 
Implementation  goals  include  inculcating  values  and  behavior  standards  into  employees, 
managers  and  leaders  throughout  the  Ageney. 

A  communieation  plan  enables  senior  leaders  to  convey  and  publicize  the  Code  to  all 
employees.  ‘Bumper  sticker’  and  ‘elevator  speeeh’  versions  allow  leaders  to  express  it  during  all 
workforce  wide  events  ineluding  Town  Hall  meetings,  promotion  ceremonies,  etc.  Presenting 
suceinet  versions  when  giving  service  anniversary  pins  and  during  development  programs’ 
graduations,  etc.  will  further  enable  leaders  to  diffuse  this  Code  throughout  the  NSA  culture. 

This  new  Code  of  Ethics  and  Professional  Conduct  should  be  presented  and  diseussed  at 
all  new  employee  orientations  and  throughout  all  leadership  training  eourses,  analyst  courses, 
ete.  Additionally,  training  courses  may  be  augmented  to  include  case  studies  that  involve  ethieal 
dilemmas,  citing  examples  sueh  as  the  Manning  and  Snowden  situations.  Example  scenarios  and 
means  of  diseussing  dilemmas  may  be  obtained  by  consulting  CIA  training  curricula. 


Conclusion 


In  this  paper,  the  author  deseribes  military  Serviees’  shared  values  and  propose  shared 
values  of  the  NSA  culture.  Professional  ethical  standards  and  benefits  of  articulating 
organizational  ethics  are  also  discussed.  The  author  defines  professions  as  well  as  Intelligence, 
and  argues  that  Intelligence  is  indeed  a  profession.  She  then  proposes  a  new  NSA  Code  of  Ethics 
and  Professional  Conduct,  and  lastly,  suggests  implementation  measures  to  inculcate  values  and 
behavior  standards  throughout  the  Agency.  Implementing  a  new  Code  will  help  NSA  employees 
to  not  only  hold  each  other  accountable,  but  also  to  support  each  other  to  continue  to  do  “what’s 
right.”  It  will  help  create  an  NSA  ethos  that  enables  employees  to  work  through  personal 
dilemmas  about  the  mission  or  tools  and  thus  help  to  thwart  possible  future  releases  of  classified 
information. 

The  U.S.  Intelligence  Community  performs  its  missions  in  compliance  with  U.S.  law, 
according  to  Agencies’  authorities,  and  accountable  to  U.S.  Government  oversight.  Civilian 
personnel  at  NSA,  on  their  first  day  of  employment,  take  an  oath  and  sign  an  agreement  to 
protect  classified  information  for  life.  Recurrent  training  at  all  levels  reinforces  the  laws, 
penalties  and  obligations. 

A  new  NSA  Code  of  Ethics  and  Professional  Conduct  will  enable  organizational  healing 
from  the  damage  caused  by  recent  releases  of  classified  information  and  the  ensuing  public 
debate  about  Intelligence,  security,  citizens’  privacy  and  public  trust.  Openly  communicating  our 
shared  values  and  connecting  those  values  to  professional  conduct  will  not  only  protect  against  a 
future  insider  threat  by  engaging  in  explicit  dialogue  but  also  increase  workforce  confidence  and 
public  trust.  Changing  an  organization’s  culture  is  challenging,  but  fortifying  the  NSA  workforce 


with  this  Code  will  reinforce  additional  security  policies  and  bring  dividends  for  employee 
morale,  recruitment  and  retention. 


Appendix 

The  Project  Management  Institute  (PMI)  is  a  non-profit  organization  for  that  provides 
standards,  conferences,  publications,  training  and  certification  for  project  management 
professionals.  Its  certifications  are  the  de  facto  standards  worldwide,  and  in  2013  over  500,000 
people  held  this  certification.  Its  Project  Management  Book  of  Knowledge  describes  “good” 
project  management  practice,  and  PMFs  approach  is  process-oriented.  “Good”  project 
management  practices  provide  benefits  across  business,  government  and  industry. 

PMI  Code  of  Ethics  and  Professional  Conduct  has  five  chapters,  each  with  a  description 
as  well  as  aspirational  and  mandatory  standards  of  behavior.  Mandatory  standards  include 
wording  such  as  “we  do  not...”  actions/behaviors.  In  addition,  the  first  chapter.  Vision  and 
Applicability,  describes  the  Codes’  vison  and  purpose  “. .  .to  instill  confidence  in  the  project 
management  profession  and  to  help  an  individual  become  a  better  practitioner;”  persons  to  whom 
the  Code  applies;  structure  [format];  values  that  support  this  Code... ’’responsibility,  respect, 
fairness  and  honesty...”  The  second  chapter.  Responsibility,  includes  mandatory  standards  with 
regulations  and  legal  requirements  and  ethics  complaints  sections.  For  example,  in  the  Respect 
chapter  mandatory  standards  are  typically  worded  such  as,  “...  we  listen  to  others. .  .we  conduct 
ourselves  in  a  professional  manner. . .”  The  Fairness  Chapter’s  mandatory  standards  include 
conflict  of  interest,  favoritism  and  discrimination  sections.  In  the  fifth  chapter.  Honesty, 
aspirational  standards  include  “we  provide  accurate  information  in  a  timely  manner.”  The  Code’s 
Appendix  include  history  of  this  standard  and  description  of  the  process  used  to  create  it; 
Appendix  B  is  a  glossary.  An  outline  of  the  version  found  on  pmi.org  website  in  December  2014 
is  as  follows  (see  endnote  43): 

PMI  Code  of  Ethics  and  Professional  Conduct 
1 .  Vision  and  Applicability 


1.1.  Vision  and  Purpose  -  “...to  instill  confidence  in  the  project  management 
profession  and  to  help  an  individual  become  a  better  practitioner.” 

1.2.  Persons  to  Whom  the  Code  Applies 

1.3.  Structure  of  the  Code  -  “...divided  into  sections  that  contain  standards...” 

1.4.  Values  that  Support  this  Code  -  “...responsibility,  respect,  fairness  and 
honesty” 

1.5.  Aspirational  and  Mandatory  Conduct 

2.  Responsibility 

2.1.  Description  -  “...is  our  duty  to  take  ownership  of  the  decisions  we  make  or 
fail  to  make...” 

2.2.  Responsibility  Aspirational  Standards 

2.3.  Responsibility  Mandatory  Standards  -  “Regulations  and  Legal 
Requirements”;  “Ethics  Complaints” 

3.  Respect 

3.1  Description  -  “our  duty  to  show  a  high  regard  for  ourselves,  others  and  the 
resources  entrusted  to  us. . .” 

3.2  Respect  Aspirational  Standards 

3.3  Respect  Mandatory  Standards 

4.  Fairness 

4.1  Description  -  “to  make  decisions  and  act  impartially  and  objectively. . .” 

4.2  Fairness  Aspirational  Standards 

4.3  Fairness  Mandatory  Standards  -  “Conflict  of  Interest  Situations”;  “Favoritism 
and  Discrimination” 

5.  Honesty 

5.1  Description  -  “duty  to  understand  the  truth  and  act  in  a  truthful  manner. . .” 

5.2  Honesty  Aspirational  Standards 

5.3  Honesty  Mandatory  Standards 
Appendix  A 

A.l  History  of  This  Standard 

A. 2  Process  Used  to  Create  This  Standard 
Appendix  B 

B. l  Glossary 
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